City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.213.208.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65296
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;132.213.208.204. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 19:46:33 CST 2025
;; MSG SIZE rcvd: 108Host 204.208.213.132.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 204.208.213.132.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 172.69.63.40 | attackspam | Oct 5 22:41:05 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=172.69.63.40 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=59 ID=8645 DF PROTO=TCP SPT=23302 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 Oct 5 22:41:06 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=172.69.63.40 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=59 ID=8646 DF PROTO=TCP SPT=23302 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 Oct 5 22:41:08 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=172.69.63.40 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=59 ID=8647 DF PROTO=TCP SPT=23302 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-10-06 15:37:35 |
| 167.172.205.116 | attackbots | Oct 6 07:07:54 v2202009116398126984 sshd[1980465]: Failed password for root from 167.172.205.116 port 41404 ssh2 Oct 6 07:08:57 v2202009116398126984 sshd[1980520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.205.116 user=root Oct 6 07:08:58 v2202009116398126984 sshd[1980520]: Failed password for root from 167.172.205.116 port 59150 ssh2 Oct 6 07:10:06 v2202009116398126984 sshd[1980666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.205.116 user=root Oct 6 07:10:09 v2202009116398126984 sshd[1980666]: Failed password for root from 167.172.205.116 port 48664 ssh2 ... |
2020-10-06 15:30:01 |
| 50.66.177.24 | attackbotsspam | SSH auth scanning - multiple failed logins |
2020-10-06 15:38:00 |
| 104.140.80.4 | attack | Email rejected due to spam filtering |
2020-10-06 15:24:05 |
| 106.75.148.228 | attackspam | 2020-10-06T14:28:25.431967billing sshd[7382]: Failed password for root from 106.75.148.228 port 42422 ssh2 2020-10-06T14:30:43.695407billing sshd[12694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.228 user=root 2020-10-06T14:30:45.911894billing sshd[12694]: Failed password for root from 106.75.148.228 port 42822 ssh2 ... |
2020-10-06 15:44:01 |
| 191.238.220.140 | attackbotsspam | SSH login attempts. |
2020-10-06 15:40:50 |
| 192.99.57.32 | attackbotsspam | SSH login attempts. |
2020-10-06 15:43:16 |
| 88.207.113.101 | attackspambots | C1,WP GET /wp-login.php |
2020-10-06 15:22:01 |
| 156.54.169.159 | attackspambots | IP blocked |
2020-10-06 15:48:36 |
| 82.82.254.8 | attackspambots | Invalid user pi from 82.82.254.8 port 37890 |
2020-10-06 15:26:56 |
| 106.13.215.17 | attackbots | Oct 5 22:37:46 router sshd[10573]: Failed password for root from 106.13.215.17 port 43220 ssh2 Oct 5 22:39:37 router sshd[10612]: Failed password for root from 106.13.215.17 port 43114 ssh2 ... |
2020-10-06 15:13:34 |
| 129.204.254.71 | attack | Oct 6 08:46:08 server sshd[8370]: Failed password for root from 129.204.254.71 port 51364 ssh2 Oct 6 08:49:55 server sshd[10328]: Failed password for root from 129.204.254.71 port 43680 ssh2 Oct 6 08:53:52 server sshd[12486]: Failed password for root from 129.204.254.71 port 36002 ssh2 |
2020-10-06 15:54:09 |
| 200.69.236.172 | attackbots | Oct 6 06:45:18 ns382633 sshd\[21267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.69.236.172 user=root Oct 6 06:45:20 ns382633 sshd\[21267\]: Failed password for root from 200.69.236.172 port 45424 ssh2 Oct 6 06:56:33 ns382633 sshd\[22538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.69.236.172 user=root Oct 6 06:56:35 ns382633 sshd\[22538\]: Failed password for root from 200.69.236.172 port 48890 ssh2 Oct 6 07:01:08 ns382633 sshd\[23132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.69.236.172 user=root |
2020-10-06 15:29:36 |
| 187.138.57.140 | attackbots | Oct 5 13:37:43 spidey sshd[32605]: Invalid user tech from 187.138.57.140 port 64008 Oct 5 13:37:43 spidey sshd[32603]: Invalid user tech from 187.138.57.140 port 64007 Oct 5 13:37:44 spidey sshd[32607]: Invalid user tech from 187.138.57.140 port 64016 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=187.138.57.140 |
2020-10-06 15:34:52 |
| 65.48.211.20 | attackbots | DATE:2020-10-05 22:38:24, IP:65.48.211.20, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-10-06 15:39:25 |